Privacy Policy
Last updated
This site is operated by Laureta Maliqi, a licensed psychologist practising in Ferizaj, Republic of Kosovo. This document explains what personal data is collected through this site, why, who processes it, and what rights you have over it.
Mental health data is a special category of personal data under Kosovo’s Law on the Protection of Personal Data, which is aligned with the European Union’s GDPR. That means it is protected more strictly than ordinary data and requires a stronger legal basis to process.
This document covers the website only. What happens inside therapy — what you say in session and how clinical notes are kept — is covered by the Confidentiality Policy.
Who the data controller is
Laureta Maliqi, licensed psychologist, Ferizaj, Kosovo. Email: lauretamaliqi70@gmail.com
For any question or request about your data, write to that address.
What is collected, and why
When you book a session
Booking does not happen on this site. The “Book a session” button opens Laureta’s Google Calendar appointment page, and everything you type is typed there, on Google’s page, not here.
That page asks for:
- your name and email address — to arrange and confirm the appointment;
- the time you chose;
- an optional note about what you would like to work on.
That optional note may contain information about your mental health. You decide how much to write there — one or two sentences is enough, and you may leave it empty entirely.
What you enter is stored as an event in Laureta’s calendar, and Google sends your confirmation email. Google’s own privacy terms apply to that page.
Legal basis: your explicit consent, given by submitting the booking, and the steps necessary to enter into a service agreement at your request.
When you write by email
If you write to the address above — to ask a question before booking, or to arrange a talk or workshop — Laureta receives your email address, your name if you give it, and whatever you choose to write. It is used only to reply to you.
Please do not send detailed clinical information by email; one or two sentences about what you would like help with is enough.
Legal basis: your and my legitimate interest in communicating about the service you asked about.
When you simply read the site
Nothing is collected by the site itself. The host sees your IP address, as every web server does. The site sets no cookies, runs no advertising, and loads nothing from third-party servers — which is why there is no cookie banner: there are no cookies to consent to.
Where your data goes
This is the most important point in this document:
This site collects nothing from you at all. It has no forms, no database, and no server code. It is a set of pages that are read, and nothing you do on them is recorded or sent anywhere by the site.
Booking and contact happen elsewhere, deliberately: on Google’s appointment page, or by email directly to Laureta. The fewer places sensitive data is kept, the fewer places it can be lost from.
Processors
Each of these acts as a data processor on my behalf:
| Service | What it processes | Where |
|---|---|---|
| Netlify | Hosts the pages you are reading. It receives your IP address as any web server does, and stores nothing else about you | EU / US |
| Google Calendar | Booking happens on Google’s appointment page, not here. Your name, email and the note you write are stored as an event in Laureta’s calendar, and Google sends your confirmation email | EU / US |
| Google Meet | Online sessions are held on Google Meet. Google carries the call and, as it states, does not record it; I do not record sessions either, unless you ask for it in writing and there is a clear clinical reason — see the Confidentiality Policy | EU / US |
If you write to Laureta by email, that message is handled by her email provider and lives in her mailbox. That is ordinary correspondence rather than something this site processes.
Some of these are based outside the European Union. Those transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent mechanism.
Your data is never sold, never traded, and never used for advertising.
How long it is kept
| What | How long |
|---|---|
| Calendar appointment and the note you wrote when booking | Up to 12 months after the session, then deleted |
| Emails you send to Laureta | Until the question is resolved, and at most 12 months |
| Clinical notes (not from this site) | Per the Confidentiality Policy |
If you do not become a client, the request data is deleted as soon as it is clear no session will take place.
Your rights
Under the Law on the Protection of Personal Data you have the right:
- to know what data I hold about you, and to receive a copy;
- to correct anything inaccurate;
- to ask for deletion of your data, within the limits of legal obligations to retain health records;
- to restrict or object to processing;
- to withdraw consent at any time — this does not affect the lawfulness of processing carried out before withdrawal;
- to complain to the Information and Privacy Agency of the Republic of Kosovo — the supervisory authority for data protection, which you can approach directly and without going through me first.
To exercise any of these, write to lauretamaliqi70@gmail.com. I respond within 30 days. There is no charge.
Security
Communication with this site is encrypted (HTTPS). Online sessions take place over encrypted video connections.
This should be said plainly: ordinary email is not a fully secure channel. Please do not send detailed clinical information by email. One or two sentences about what you are going through is enough to arrange an appointment — the rest belongs in session.
Children
Laureta works with adults only: sessions are for people aged 18 and over, however contact is made. No data about anyone under 18 is knowingly collected through this site.
Changes
If this document changes, the date at the top is updated. Substantive changes are communicated to active clients by email.
The full terms of the service — booking, cancellation and payment — are in the Terms of Service.